CVE-2023-34575

CriticalCVSS 9.8

Published: 20/09/2023(UTC)Updated: 12/06/2026(UTC)Translated: 14/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.27%

51th percentile - higher than 51% of all known CVEs

Summary

PrestaShop version 2.0.7 has an SQL injection vulnerability in the opartsavecart module. Remote attackers can execute arbitrary SQL commands via the initContent() and displayAjaxSendCartByEmail() methods.

Risk Assessment

This vulnerability may lead to unauthorized access to the database, potentially resulting in data leakage or modification.

Recommendation

It is recommended to update PrestaShop to the latest version and review application security to minimize the risk of SQL injection attacks.

Original NVD description (English source)

SQL injection vulnerability in PrestaShop opartsavecart through 2.0.7 allows remote attackers to run arbitrary SQL commands via OpartSaveCartDefaultModuleFrontController::initContent() and OpartSaveCartDefaultModuleFrontController::displayAjaxSendCartByEmail() methods.